$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa File: h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa (raw, json) Hash identifier: CE7Jbg+Z+5craq5hEb86CPck9H/jLgq1RczMfVM3ZcA= Subject key identifier: 87:74:3E:F3:23:3D:16:1B:D8:51:A1:A3:C3:4A:47:8B:B5:AB:8C:65 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02F5 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa Signing time: Fri 11 Oct 2024 01:20:43 +0000 ROA not before: Fri 11 Oct 2024 01:20:43 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 11 01:20:43 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=87743EF3233D161BD851A1A3C34A478BB5AB8C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:0d:14:55:48:58:51:75:81:2c:d0:17:d7: 1f:f0:72:b4:71:2a:48:bb:5d:ca:6a:84:9f:58:50: 65:a8:56:11:f0:8c:b3:c6:46:d5:ca:b9:38:b4:12: 39:a3:48:d8:ef:21:5c:22:05:a9:c8:c6:94:c1:37: cb:c8:85:1d:11:2b:6f:e7:a7:59:ad:72:d1:f9:63: a6:04:32:03:10:91:24:73:04:2d:dc:0d:bb:39:ae: 29:e7:61:50:25:d3:96:75:27:2f:ed:20:46:04:8f: 92:66:90:65:e7:e4:34:f2:fb:bd:32:02:28:44:bf: 89:ce:10:ce:ce:bd:44:78:e6:5a:48:83:45:88:a3: 9a:d9:2a:8c:97:66:50:c1:d9:c3:36:5f:95:af:a5: fe:0c:0b:c2:bd:17:69:e6:cf:39:28:4e:9d:bb:fe: 84:9d:72:e3:3e:7b:be:d8:e3:5d:c8:2c:f5:f7:ad: 0c:9c:32:bf:62:56:b6:54:1a:a4:ff:68:d2:f4:82: 24:45:94:89:a1:36:5b:8b:e8:b3:3d:12:28:e2:50: f0:ce:82:2b:ef:d9:2b:bd:e1:71:a5:ef:30:6a:7c: 31:05:ff:26:19:37:9e:b0:ef:b4:b2:3c:eb:0b:5b: 95:a6:67:75:58:21:d9:52:9b:76:df:b4:eb:c8:78: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:3E:F3:23:3D:16:1B:D8:51:A1:A3:C3:4A:47:8B:B5:AB:8C:65 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/h3Q-8yM9FhvYUaGjw0pHi7WrjGU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.80.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:82:70:51:9a:bf:42:47:4b:ef:f6:8f:61:d4:70:07:1c:91: 12:f2:42:25:62:39:75:62:d9:cf:bb:18:41:eb:ed:87:28:41: b6:44:75:1b:be:d5:dd:38:4b:3e:e4:0d:d9:a5:a8:dc:b5:56: 10:99:a9:b3:5d:6e:a9:44:76:cf:22:06:2f:b8:e8:51:9d:35: 13:c9:ee:cb:b1:cb:c1:6a:c8:93:29:68:2a:08:d3:2b:73:85: 52:8d:5f:53:56:6c:fa:42:fd:51:03:96:2d:44:dc:35:2a:fd: 2d:25:34:9a:1f:8e:b7:c7:9b:6f:38:9f:11:c5:d0:cc:2f:42: e9:e9:e6:3c:62:d4:b1:50:4b:31:2e:0f:49:16:38:98:10:97: d2:c3:ae:4e:27:e9:79:7d:3d:f7:b8:f8:e6:cd:1f:f2:77:0d: dd:5d:84:e4:e0:b8:d6:8d:4c:ba:22:14:1c:01:2b:1c:ef:80: 8b:2f:20:ee:b8:5a:37:c0:12:87:13:0d:f6:7f:39:fb:ec:78: ae:f0:f0:28:8e:2b:3e:96:a1:ba:a1:b6:2c:04:6d:e2:29:e9: 5b:e0:85:8a:ae:6c:20:c2:f2:cc:d9:f4:29:d2:0f:6d:03:0e: aa:2a:97:c0:42:08:24:25:3a:a5:b9:b5:5f:4f:02:05:29:6e: d6:7d:b0:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTEw MTIwNDNaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg3NzQzRUYzMjMzRDE2 MUJEODUxQTFBM0MzNEE0NzhCQjVBQjhDNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqug0UVUhYUXWBLNAX1x/wcrRxKki7XcpqhJ9YUGWoVhHwjLPG RtXKuTi0EjmjSNjvIVwiBanIxpTBN8vIhR0RK2/np1mtctH5Y6YEMgMQkSRzBC3c Dbs5rinnYVAl05Z1Jy/tIEYEj5JmkGXn5DTy+70yAihEv4nOEM7OvUR45lpIg0WI o5rZKoyXZlDB2cM2X5Wvpf4MC8K9F2nmzzkoTp27/oSdcuM+e77Y413ILPX3rQyc Mr9iVrZUGqT/aNL0giRFlImhNluL6LM9EijiUPDOgivv2Su94XGl7zBqfDEF/yYZ N56w77SyPOsLW5WmZ3VYIdlSm3bftOvIeNJnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh3Q+8yM9FhvYUaGjw0pHi7WrjGUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2gzUS04eU05Rmh2WVVhR2p3MHBIaTdXcmpHVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ9LFAwDQYJKoZIhvcNAQELBQADggEBAB2CcFGav0JHS+/2j2HUcAcckRLy QiViOXVi2c+7GEHr7YcoQbZEdRu+1d04Sz7kDdmlqNy1VhCZqbNdbqlEds8iBi+4 6FGdNRPJ7suxy8FqyJMpaCoI0ytzhVKNX1NWbPpC/VEDli1E3DUq/S0lNJofjrfH m284nxHF0MwvQunp5jxi1LFQSzEuD0kWOJgQl9LDrk4n6Xl9Pfe4+ObNH/J3Dd1d hOTguNaNTLoiFBwBKxzvgIsvIO64WjfAEocTDfZ/OfvseK7w8CiOKz6WobqhtiwE beIp6VvghYqubCDC8szZ9CnSD20DDqoql8BCCCQlOqW5tV9PAgUpbtZ9sI0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:19 2025 by rpki-client